Artificial intelligence has become cybercriminals' best ally . You no longer need to be an expert to launch a convincing scam: with generative AI tools, anyone can write flawless messages, clone voices, or create fake videos that look real. The result is an exponential increase in digital fraud, which in Spain already accounts for the majority of court and police activity.
The Civil Guard has repeatedly warned about this trend. According to Captain Ángel Blanco, head of the Cyber Command's Judicial Police Unit, AI has effectively buried traditional phishing, the kind that was detected by spelling mistakes or strange translations. Now, emails and messages are flawless, and criminals use deepfakes to impersonate executives, celebrities, or even family members in phone calls. The sophistication is such that victims have no visual indication that they are being deceived.
The rise of AI scams in Spain
The figures leave no room for doubt. In the province of Burgos alone, 986 reports of cybercrimes were filed in the first quarter of this year, 4,3% more than the previous year, and 92% of these were scams. The situation is similar in Galicia: cybercrimes increased by 9,3% in 2025, reaching 25.892 cases, which equates to about 70 per day. And across Spain, the Guardia Civil's Cyber Command registered 332 reports in a single day, on July 27th. The majority of these crimes are online scams , which now account for 85% of all cybercrimes in Galicia.
The modus operandi varies, but all have one thing in common: AI. Criminals use voice cloning to simulate family emergencies, create fake websites that mimic banks or online marketplaces, and send personalized messages with data obtained from social media. A recent case in Burgos involved the mayor herself, Cristina Ayala, who alerted authorities to a fraudulent sale of vehicles from the municipal impound lot advertised on social media. The aim was to trick citizens into paying impound fees or providing their bank details.
Deepfakes and voice cloning: the new face of deception
Deepfake technology has taken a qualitative leap. It's no longer just about manipulated videos of celebrities promising miraculous investments, but also about phone calls in which a family member's voice pleads for desperate help. According to Captain Blanco, this is one of the most worrying trends. Cybercriminals are also using AI to analyze photos posted on social media and locate their victims, as demonstrated by an experiment in the United States with a tourist in Hollywood. In a matter of seconds, an AI model identified the exact location in the photo.
Investment scams have also benefited from AI. The US Federal Trade Commission (FTC) recorded 144.041 investment-related loss reports in 2025, totaling more than $8.000 billion, a 38% increase over the previous year. Many of these scams use cryptocurrencies and fake platforms that display fictitious profits. In Spain, cryptocurrency fraud is one of the most common crimes , according to the Civil Guard.
The most vulnerable groups
The elderly and minors are the most affected by this increase in scams. The elderly, due to their lack of familiarity with technology, are victims of deceptive calls impersonating their bank (vishing), so it's vital to know why you shouldn't answer the phone . Minors fall prey to fraud through social media and online gambling platforms, such as fake sweepstakes or digital extortion. Small businesses and the self-employed are also common targets , especially with CEO fraud or the interception of invoices via email.
A common mistake among victims is deleting evidence, out of shame or fear of what others will say. The Civil Guard insists that this information is crucial for investigations. Furthermore, there is the 'recovery fraud,' where the same scammer contacts the victim again, posing as a lawyer or police officer who promises to recover the money in exchange for payment.
Tips to protect yourself
Experts agree that prevention is the best weapon. Argentine hacker César Cerrudo, author of 'A Hacker's Security Guide', recommends three basic measures: activate two-step authentication on all accounts, use different passwords for each service, and be wary of any message that urgently requests money or personal information. He also advises verifying the sender's identity through another channel , such as a phone call.
Another recommendation is to limit the information shared on social media. AI can collect public data to create personalized and more persuasive messages. Therefore, it's important to review profile privacy settings and avoid posting vacation photos in real time, as criminals can locate the person. Digital literacy is key , especially for the most vulnerable groups.
The technological answer: WhatsApp and AI
The platforms themselves are reacting. WhatsApp is testing an AI-powered security filter called 'Scam Alert,' which analyzes messages from unknown contacts directly on the device, without compromising end-to-end encryption. If it detects a fraudulent pattern, it displays a warning to the user, who can then block and report the sender. This feature, currently in beta for Android, is optional and is activated in the settings, allowing users to configure WhatsApp to protect against scammers.
The tool is an example of how AI can be used to defend against cybercriminals. However, experts warn that technology alone is not enough. International collaboration between law enforcement agencies is essential, as many fraudsters operate from abroad. In a globalized world, victims and perpetrators can be thousands of miles apart , and the only way to dismantle these networks is to share information and attack patterns.
Artificial intelligence has multiplied cybercriminals' ability to deceive, but it also offers tools for protection. The key lies in digital literacy, constant verification, and remaining vigilant, especially in summer when scammers intensify their campaigns. No one is immune to risk, but with basic measures like two-step authentication and being wary of urgent messages, the likelihood of falling victim to a scam can be significantly reduced. Digital security is no longer an option, but a necessity.
